Overview

overview

8

Static

static

8

738c1f2637...48.exe

windows7-x64

8

738c1f2637...48.exe

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    738c1f2637aa6d16abe4dab0c9abfc32f51250a2b9be15c086ec4a2671ac3a48

  • Size

    58KB

  • Sample

    221123-lw6q6ace29

  • MD5

    5533f0feb5899ab595af53c3dd66507a

  • SHA1

    9203820b601f75146ecbb965852fd6b001002a2a

  • SHA256

    738c1f2637aa6d16abe4dab0c9abfc32f51250a2b9be15c086ec4a2671ac3a48

  • SHA512

    7326ffe25fb04145bb290e9c562dbee62c0262f36f2dde088676f2f6bffb4f00e04651f2bde0fb3e76be468de6aa4dcfca50c9a6a716ca2d5a1792a4be4763fb

  • SSDEEP

    1536:RKLY+dV5AbO4+4UsmhFBsx2GCnLRkIhuiD:RKs+P5cmix2GiLRrui

Score
8/10
evasionupx

Malware Config

Targets

    • Target

      738c1f2637aa6d16abe4dab0c9abfc32f51250a2b9be15c086ec4a2671ac3a48

    • Size

      58KB

    • MD5

      5533f0feb5899ab595af53c3dd66507a

    • SHA1

      9203820b601f75146ecbb965852fd6b001002a2a

    • SHA256

      738c1f2637aa6d16abe4dab0c9abfc32f51250a2b9be15c086ec4a2671ac3a48

    • SHA512

      7326ffe25fb04145bb290e9c562dbee62c0262f36f2dde088676f2f6bffb4f00e04651f2bde0fb3e76be468de6aa4dcfca50c9a6a716ca2d5a1792a4be4763fb

    • SSDEEP

      1536:RKLY+dV5AbO4+4UsmhFBsx2GCnLRkIhuiD:RKs+P5cmix2GiLRrui

    Score
    8/10
    evasionupx

    • Stops running service(s)

      evasion

    • UPX packed file

      Detects executables packed with UPX/modified UPX open source packer.

      upx

    • Loads dropped DLL

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Modify Existing Service

1
T1031

Privilege Escalation

Defense Evasion

Impair Defenses

1
T1562

Credential Access

Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Service Stop

1
T1489

Tasks